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CLAIMS 

What is claimed is: 



1 1. A method for providing access protection to 

2 electronic storage devices^ said method comprising the 

3 steps of: 

4 providing a hardware-level security code for a 

5 storage device on which is stored an electronic file to 

6 which restricted access is desired; and 

^ 7 allowing access to said storage device only when a 

L=j 8 user enters a user code that matches said security code. 

: f i 

CO 

'^i 2. The method of Claim 1, further comprising the steps 

ul2 of initializing said security code within a microcode of 

l"3 said storage device, wherein access to said storage 

M=4 device is denied during said initializing step. 

0 

1 3. The method of Claim 1, further comprising the step 

2 of defining an operating system (OS) extension and 

3 corresponding OS extension process by which said allowing 

4 step is implemented. 
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1 4. The method of Claim 3, wherein said defining step 

2 includes: 

3 adding a hardware security code checking process to 

4 an OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write on said storage device. 



1 5. The method of Claim 4, further comprising the step 

2 of : 



tfi3 evaluating via said hardware security code checking 

process said security code returned by said file 
lw=5 protocol ; and 



rn 



□ 



in response to said security code having a pre- 
determined default value, providing said user with 
unrestricted access to said storage device. 



6. The method of Claim 5, further comprising the step 

2 of comparing said security code with said user provided 

3 access code when said authentication code is not said 

4 pre-determined default value. 



1 7. The method of Claim 5, further comprising the step 

2 of outputting an access deny message of said user. 
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1 8. The method of Claim 1, further comprising the steps 

2 of : 

3 restricting a subsequent request for access to said 

4 storage device by a user when said security code does not 

5 match said user access code during an initial request by 

6 said user; and 

7 terminating a job submitted by said user. 

Si 



Li 



AUS920000544US1 -19- 



1 9. A computer program product comprising: 

2 a computer readable medium; and 

3 program instructions stored on said computer 

4 readable medium for implementing file access protection 

5 by : 

6 providing a security code for a drive on which 

7 is stored an electronic file to which restricted 

8 access is desired; and 

□ 

& allowing access to said drive only when a user 



3 



access code that matches said security code is 

rU provided. 

m 

a 

y^i 10- The computer program product of Claim 9, further 

hJ2 comprising program instructions for initializing said 

Ll3 security code within a microcode of said drive, wherein 

^'4 access to said drive is denied during said initializing 

"^5 step. 



I 



2 



3 



11. The computer program product of Claim 9, further 
comprising program instructions for implementing an 
operating system (OS) extension. 
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1 12. The computer program product of Claim 11, further 

2 comprising program instructions for: 

3 adding a hardware security code checking process to 

4 an OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write with respect to said storage device. 



1 13. The computer program product of Claim 12, further 

2 comprising program instructions for: 

□ 

C3 evaluating via said hardware security code checking 

"-J 

uf process said security code returned by said file 

nJs protocol; and 



^--'6 in response to said security code having a pre- 

Lx7 determined default value, providing said user with 

unrestricted access to said storage device. 



'^i 14. The computer program product of Claim 13, further 

2 comprising program instructions for comparing said 

3 security code with said user code when said security code 

4 is not said pre-determined default value. 



1 15, The computer program product of Claim 13, further 

2 comprising program instructions for outputting an access 

3 denied message of said user, and canceling the job 

4 submitted by said user. 
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1 16, The computer program product of Claim 15, further 

2 comprising program instructions for restricting a 

3 subsequent request for access to said storage device by a 

4 user when said security code does not match said user 

5 access code during an initial request by said user. 



y 

Li, 
□ 
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1 17. A data processing system comprising: 

2 a processor; 

3 a memory linked to said processor via an 

4 interconnect; 

5 an input/output (I/O) device; 

6 a drive on which is stored one or more files for 

7 which restricted access is desired; and 

an OS executing on said processor that provides 
support for assigning a hardware-level security code for 

nib said drive and allows access to said file by user only 

rn when a user entered access code matches said security 

sag 

O2 code . 

ru 

1^1 18. The data process system of Claim 17, wherein further 

O2 .said OS includes an OS extension by which an assigning of 

D 

"^3 said security code and access to said drive are 

4 implemented . 



1 19. The data process system of Claim 18, wherein further 

2 said OS extension includes program instructions for: 

3 adding a hardware security code checking code to an 

4 OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write on said drive; and 



AUS920000544US1 



7 identifying specific locations on flash ROM or 

8 EEPROM that houses drive microcode on said drive for 

9 initializing said security code. 



1 20. The data process system of Claim 18, wherein further 

2 said OS extension includes program instructions for: 

3 evaluating via said hardware security code checking 

4 process said security code returned by said file 

5 protocol; and 

VPS? 

sQs in response to said security code having a pre- 

,.77 determined default value, providing said user with 

njs unrestricted access to said drive. 

m 



^1 21. The data process system of Claim 20, wherein further 



I'm said OS extension processes includes program instructions 

^3 for comparing said authentication code with said user 

"'34 entered access code when said authentication code is not 



'''5 said pre-determined default value. 



1 22. The data process system of Claim 21, wherein further 

2 said OS extension further includes program instructions 

3 for outputting an access deny message to said user when 

4 said security code does not match said access code. 



AUS920000544US1 -24- 



23. The data processing system of Claim 21, further 
comprising means for restricting a subsequent request for 
access to said storage device by a user when said 
security code does not match said user access code during 
an initial request by said user. 



24. A storage system comprising: 

a recordable medium for recording data; and 

a security code that is unique to said storage 
system and which protects said data recorded on said 
recordable medium from unauthorized access. 



25. The storage system of Claim 24, further comprising: 
an input/output mechanism; and 

means for issuing said security code to a requesting 
operating system extension. 



26. The storage system of Claim 25, wherein said 
input/output mechanisms connects said storage system with 
a data accessing device. 



27. The storage 
accessing device 
operating system 



system of Claim 26, wherein said data 
is a processor on which said requesting 
process executes. 



